CVE-2013-5024

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Measurement Studio 2013 and earlier and other products, allows remote attackers to obtain sensitive information about the existence of registry keys via crafted (1) key-open or (2) key-close method calls.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://digital.ni.com/public.nsf/allkb/548965C170D6AA2586257BD3004B146B?OpenDocumentVendor Advisory
http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocumentVendor Advisory
http://digital.ni.com/public.nsf/websearch/D8E97E95D59AC17086257B3600508823?OpenDocumentVendor Advisory
http://digital.ni.com/public.nsf/allkb/548965C170D6AA2586257BD3004B146B?OpenDocumentVendor Advisory
http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocumentVendor Advisory
http://digital.ni.com/public.nsf/websearch/D8E97E95D59AC17086257B3600508823?OpenDocumentVendor Advisory

Timeline

Published: Aug 6, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-50254.3An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows remote attackers to cau CVE-2013-50269.3An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attac CVE-2013-50279.8Collabtive 1.0 has incorrect access control CVE-2013-50286.5SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to exe CVE-2013-50294.3phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related CVE-2013-50307.2Ruckus Wireless Zoneflex 2942 devices with firmware 9.6.0.0.267 allow remote attackers to bypass authentication, and subsequently access cer CVE-2013-503110.0Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability tha CVE-2013-503210.0Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability tha CVE-2013-503310.0Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability tha CVE-2013-503410.0Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability tha CVE-2013-50354.9Multiple race conditions in HtmlCleaner before 2.6, as used in Open-Xchange AppSuite 7.2.2 before rev13 and other products, allow remote aut CVE-2013-50367.5The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation